Privacy & Cookie Policy

Who we are and what this policy covers

This Privacy Policy explains how Thorium ("we", "us", or "our") collects, uses, stores, and protects ordinary business contact data when you visit our website at thoriumapp.co.uk, use our contact forms, or engage with our services. This policy applies to all visitors, prospective clients, and existing clients.

We are committed to protecting the privacy and security of personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable legislation. We process personal data lawfully, fairly, and transparently.

What data we collect and why

We collect the following categories of personal data:

Contact form submissions

When you submit a message through our contact form, we collect your name, email address, company name (if provided), and the content of your message. We collect this data to respond to your enquiry and assess whether our services are a good fit for your needs.

Website analytics

We use Google Analytics, loaded through Google Tag Manager, to collect anonymised data about how visitors use our website, including pages visited, time spent on pages, referral sources, and device information. This data is aggregated and cannot be used to identify individual visitors.

Live chat and HubSpot

We use HubSpot for our website chat widget, for visitor analytics, and as the customer relationship management system where we record enquiries. If you start a chat, we collect the name, email address and other details you choose to give us in that conversation, and we may ask the same questions our demo form asks. When you submit the demo form, the details you provide are also copied into HubSpot so our team can follow up. HubSpot sets its own cookies to recognise returning visitors and to keep a chat conversation going between pages.

Cookies

Our website uses essential cookies that are required for the site to work, such as keeping you signed in and remembering your cookie choice. These are always active. We also use optional analytics and chat cookies, described above, which are set only if you accept them. A cookie banner appears on your first visit and nothing optional is loaded until you choose. You can change your decision at any time using the Cookie settings link in the footer of any page.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. We do not purchase personal data from third parties.

Legal basis for processing

We process personal data under the following legal bases:

Legitimate interests

Processing contact form submissions to respond to business enquiries and provide information about our services.

Consent

Using optional analytics and chat cookies to understand website usage patterns and to run our chat widget. These are not set unless you accept them, and you may withdraw consent at any time using the Cookie settings link in the footer of any page.

Contractual necessity

Processing data necessary for the performance of a contract when you engage our software services.

Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form data is retained for up to 2 years from the date of submission, after which it is securely deleted.
• Analytics data is aggregated and anonymised. Individual session data is not retained beyond the analytics platform's standard retention period.
• Client engagement data is retained for the duration of the business relationship plus 6 years for legal and tax compliance purposes.

Third-party processors

We use the following third-party services to process data on our behalf:

Website hosting

Our website is hosted on cloud infrastructure using secure content delivery networks.

Analytics

Google Analytics (with IP anonymisation enabled), delivered through Google Tag Manager, for website usage analysis.

Chat and customer relationship management

HubSpot, for the website chat widget, visitor analytics, and storing enquiry and contact details so our team can respond. HubSpot processes this data on servers in the European Union.

Email

Professional email services for responding to contact form submissions.

All third-party processors are selected for their compliance with data protection laws and are bound by appropriate data processing agreements.

Your rights under UK GDPR

Under the UK General Data Protection Regulation, you have the following rights regarding your personal data:

Right of access

You may request a copy of the personal data we hold about you.

Right to rectification

You may request that we correct any inaccurate personal data.

Right to erasure

You may request that we delete your personal data, subject to legal retention requirements.

Right to data portability

You may request that we provide your data in a structured, commonly used, machine-readable format.

Right to object

You may object to the processing of your personal data where we rely on legitimate interests as the legal basis.

Right to withdraw consent

Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us using the details below. We will respond to your request within 30 days.

Data security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, and regular security reviews.

How to contact us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. Visit our homepage to learn more about Thorium.